Israeli Ad Tech Firm Linked to Zero-Click Spyware Delivery Through Online Ads
Security researchers have documented what appears to be the first confirmed case of zero-click spyware being delivered through online advertising. The investigation, conducted by Citizen Lab and ad security firm Confiant, identified Israeli company Discover-Tech as a key intermediary linking advertising networks to spyware operators.
Zero-click attacks are particularly dangerous because they require no action from the victim—no clicking links or downloading files. Instead, the malicious code executes simply when a user views an advertisement in their browser. According to the researchers, this method allowed Discover-Tech to deliver spyware to devices at Al Jazeera, among other targets.
The firm reportedly operates under the guise of a legitimate advertising agency, positioning itself within standard ad-buying ecosystems. This positioning enabled it to place malicious advertisements across numerous websites, creating a broad attack surface without raising immediate suspicion.
The findings highlight ongoing concerns about the advertising technology supply chain as a vector for surveillance and espionage operations. Researchers note that the complexity and scale of modern ad networks make thorough security vetting challenging, allowing malicious actors to exploit the system.
Citizen Lab and Confiant have published technical details of the attack vectors identified in their investigation, which they say demonstrates how ad networks can be weaponized for targeted surveillance campaigns.